Avatar billede TheNythen Nybegynder
08. juli 2010 - 15:33 Der er 9 kommentarer

Messenger 'Virus'

Hej, jeg er en fyr på 17, som tændte for min computer. Da den pludselig skriver til min veninde, på messenger uden jeg gør noget.
Da efter siger den at der er plantet 3 virusser på min computer, og så siger den jeg har 10minutter til at fjerne dem. Efter ca 5 - 10 minutter siger den så jeg har det fjernet.. Så jeg skynder mig så at skrive til jer, for at spørge hvad jeg skal gøre.


HiJack This:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:32:55, on 08-07-2010
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Users\Philip\AppData\Roaming\CoolSystems\ordbogen.com\ordbogen.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Philip\Program Files\DNA\btdna.exe
C:\Users\Philip\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Philip\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Philip\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Users\Philip\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Philip\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Users\Philip\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Philip\AppData\Local\Google\Chrome\Application\chrome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/cgi-bin/redirect/?country=COM&range=AD&phase=8&key=IESTART
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2535306
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/cgi-bin/redirect/?country=COM&range=AD&phase=8&key=IESTART
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
R3 - URLSearchHook: Messenger Plus Live Denmark Toolbar - {014611b2-9fef-447d-9310-04f98913898d} - C:\Program Files\Messenger_Plus_Live_Denmark\tbMess.dll
O1 - Hosts: ::1 localhost
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Messenger Plus Live Denmark Toolbar - {014611b2-9fef-447d-9310-04f98913898d} - C:\Program Files\Messenger_Plus_Live_Denmark\tbMess.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.1.27.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Vis Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTogg.dll
O3 - Toolbar: Messenger Plus Live Denmark Toolbar - {014611b2-9fef-447d-9310-04f98913898d} - C:\Program Files\Messenger_Plus_Live_Denmark\tbMess.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [LchMHotkey] LchMHKey.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [ATSwpNav] "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Ordbogen.com] C:\Users\Philip\AppData\Roaming\CoolSystems\ordbogen.com\ordbogen.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Philip\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Subsystem Monitor] C:\Users\Philip\AppData\Roaming\Network Printer\NetPrint.exe
O4 - HKCU\..\Run: [wsxitu] C:\Windows\system32\w6m81yjkf.exe
O4 - HKCU\..\Run: [avqghm] C:\Windows\system32\u1kvwrx60.exe
O4 - HKCU\..\Run: [kfgbcx0] C:\Windows\system32\5m1cdi8.exe
O4 - HKCU\..\Run: [chxd2] C:\Windows\system32\gbh2noj087.exe
O4 - HKCU\..\Run: [yjzpfqv] C:\Windows\system32\ndezpqlm.exe
O4 - HKCU\..\Run: [iejuf] C:\Windows\system32\ojkfgb08.exe
O4 - HKCU\..\Run: [sotep] C:\Windows\system32\bcxnojzavlm.exe
O4 - HKCU\..\Run: [brrhn6] C:\Windows\system32\g1xs1j70.exe
O4 - HKCU\..\Run: [zpqlb] C:\Windows\system32\fbrc1sty.exe
O4 - HKCU\..\Run: [hdd66] C:\Windows\system32\b81st60v.exe
O4 - HKCU\..\Run: [lghmio] C:\Windows\system32\jkfgb0hxd91.exe
O4 - HKCU\..\Run: [rhhxd66] C:\Windows\system32\afvb60o3uk.exe
O4 - HKCU\..\Run: [hminyj] C:\Windows\system32\3c0dtz6.exe
O4 - HKCU\..\Run: [nsoee81] C:\Windows\system32\jzavb2hid0.exe
O4 - HKCU\..\Run: [fabgc6s] C:\Windows\system32\j0fk86w8103.exe
O4 - HKCU\..\Run: [rcxnoj] C:\Windows\system32\fbb86s81epa.exe
O4 - HKCU\..\Run: [mhdt81] C:\Windows\system32\0snoze2.exe
O4 - HKCU\..\Run: [nypfq1g] C:\Windows\system32\xsty86k81w.exe
O4 - HKCU\..\Run: [zuva8] C:\Windows\system32\3u1blhc.exe
O4 - HKCU\..\Run: [rnnye5z] C:\Windows\system32\ssyt081a.exe
O4 - HKCU\..\Run: [stozzav] C:\Windows\system32\ny1opuqqgw.exe
O4 - HKCU\..\Run: [jzp0v] C:\Windows\system32\d2jufbb6.exe
O4 - HKCU\..\Run: [lwrcx0] C:\Windows\system32\ffvwrhid.exe
O4 - HKCU\..\Run: [fwwcx0d] C:\Windows\system32\aagb081i.exe
O4 - HKCU\..\Run: [vlmrn] C:\Windows\system32\1w97081.exe
O4 - HKCU\..\Run: [zzkvwr] C:\Windows\system32\toe1v70rnd.exe
O4 - HKCU\..\Run: [qrws6i] C:\Windows\system32\allmh081o.exe
O4 - HKCU\..\Run: [agwhs1j] C:\Windows\system32\lr60tzjf.exe
O4 - HKCU\..\Run: [qrw81] C:\Windows\system32\0hc0jpz.exe
O4 - HKCU\..\Run: [sxtjjff] C:\Windows\system32\mhidez0f.exe
O4 - HKCU\..\Run: [uzkvm1] C:\Windows\system32\k1lghm81.exe
O4 - HKCU\..\Run: [hnojp8] C:\Windows\system32\alhh2nt2zal.exe
O4 - HKCU\..\Run: [rrcxno] C:\Windows\system32\b66s81ep.exe
O4 - HKCU\..\Run: [jefkg6w] C:\Windows\system32\idtupql081.exe
O4 - HKCU\..\Run: [hhid0] C:\Windows\system32\fa0rm0tzjf.exe
O4 - HKCU\..\Run: [ideu1k] C:\Windows\system32\nojkf081.exe
O4 - HKCU\..\Run: [jzfa6w] C:\Windows\system32\ojzavlmh.exe
O4 - HKCU\..\Run: [pavqrw] C:\Windows\system32\dy0pk0rxhd.exe
O4 - HKCU\..\Run: [zfqqghm] C:\Windows\system32\7081wn3.exe
O4 - HKCU\..\Run: [tju1k] C:\Windows\system32\hcdi81uv60.exe
O4 - HKCU\..\Run: [sdopf70] C:\Windows\system32\s1i81u91g.exe
O4 - HKCU\..\Run: [pllgcc8] C:\Windows\system32\p66g86s3.exe
O4 - HKCU\..\Run: [kpfvwrh] C:\Windows\system32\j2pfgbrs.exe
O4 - HKCU\..\Run: [epqlr] C:\Windows\system32\03w0xnt.exe
O4 - HKCU\..\Run: [rhiydo3] C:\Windows\system32\q0rhn86uff.exe
O4 - HKCU\..\Run: [bmhxyy] C:\Windows\system32\66whdd2.exe
O4 - HKCU\..\Run: [dejpll2] C:\Windows\system32\3hxd66u.exe
O4 - HKCU\..\Run: [ggchsde] C:\Windows\system32\k0lq86c81o.exe
O4 - HKCU\..\Run: [kbb2h] C:\Windows\system32\6q81cno.exe
O4 - HKCU\..\Run: [pqlm3c] C:\Windows\system32\pqlbcxno.exe
O4 - HKCU\..\Run: [rmnso10] C:\Windows\system32\g6w3idtup.exe
O4 - HKCU\..\Run: [xydtj] C:\Windows\system32\66i81uf.exe
O4 - HKCU\..\Run: [tepggbh] C:\Windows\system32\dzuva86m8.exe
O4 - HKCU\..\Run: [syjpk0r] C:\Windows\system32\bwndoeuplq.exe
O4 - HKCU\..\Run: [zpqlbcx] C:\Windows\system32\kabg81sd.exe
O4 - HKCU\..\Run: [gbwxc8] C:\Windows\system32\0lbh66y.exe
O4 - HKCU\..\Run: [jefk8] C:\Windows\system32\jzk1abg81.exe
O4 - HKCU\..\Run: [cdtjp3q] C:\Windows\system32\h20yz3vb.exe
O4 - HKCU\..\Run: [zeaqq81] C:\Windows\system32\cdi86u81gr.exe
O4 - HKCU\..\Run: [ytopu] C:\Windows\system32\66e86q8.exe
O4 - HKCU\..\Run: [fqmrh] C:\Windows\system32\u6k86w81i.exe
O4 - HKCU\..\Run: [awmm8] C:\Windows\system32\juzkvwrhidt.exe
O4 - HKCU\..\Run: [kagbh] C:\Windows\system32\ejzf2lmh08.exe
O4 - HKCU\..\Run: [pqlmrc1] C:\Windows\system32\dzz2fgb081i.exe
O4 - HKCU\..\Run: [hsdez] C:\Windows\system32\rx66eppq.exe
O4 - HKCU\..\Run: [bwxc81] C:\Windows\system32\1mxdzz6.exe
O4 - HKCU\..\Run: [xnoe70] C:\Windows\system32\lccsi1z703g.exe
O4 - HKCU\..\Run: [rws1i] C:\Windows\system32\pvqqw1sotj.exe
O4 - HKCU\..\Run: [jzpqvlr] C:\Windows\system32\euk0lbh6.exe
O4 - HKCU\..\Run: [eflvr] C:\Windows\system32\z66q86c8.exe
O4 - HKCU\..\Run: [dezav0] C:\Windows\system32\70qqgw1.exe
O4 - HKCU\..\Run: [uupvq3s] C:\Windows\system32\ijeevllbh2.exe
O4 - HKCU\..\Run: [xcidez0] C:\Windows\system32\nnoj081q.exe
O4 - HKCU\..\Run: [vgmxhdy] C:\Windows\system32\ggwxc86o.exe
O4 - HKCU\..\Run: [bbxx6] C:\Windows\system32\3mhn60p.exe
O4 - HKCU\..\Run: [mcs1j] C:\Windows\system32\0ns86e8.exe
O4 - HKCU\..\Run: [ndyeflv] C:\Windows\system32\a86m81yjkfv.exe
O4 - HKCU\..\Run: [iytpp2] C:\Windows\system32\rsnt60vg.exe
O4 - HKCU\..\Run: [jfvg1] C:\Windows\system32\e1uva81x.exe
O4 - HKCU\..\Run: [yjjkf0] C:\Windows\system32\iyo1f703.exe
O4 - HKCU\..\Run: [kkaq0r] C:\Windows\system32\s86e81qbcxd.exe
O4 - HKCU\..\Run: [fqqgh] C:\Windows\system32\zupll2rhid.exe
O4 - HKCU\..\Run: [pflgcc8] C:\Windows\system32\uzvv2m5hdy.exe
O4 - HKCU\..\Run: [pvfbwxc] C:\Windows\system32\p2g5bxst.exe
O4 - HKCU\..\Run: [rhs1i] C:\Windows\system32\palc1sty8.exe
O4 - HKCU\..\Run: [gccydeu] C:\Windows\system32\pk0rmsty87.exe
O4 - HKCU\..\Run: [cdjte3q] C:\Windows\system32\vwrhy1opu81.exe
O4 - HKCU\..\Run: [zpvwx] C:\Windows\system32\0vq6m81.exe
O4 - HKCU\..\Run: [upkgww3] C:\Windows\system32\z5plghm8.exe
O4 - HKCU\..\Run: [brsnd] C:\Windows\system32\m6cndj66a.exe
O4 - HKCU\..\Run: [whhid08] C:\Windows\system32\ffgwhsxi.exe
O4 - HKCU\..\Run: [siojzav] C:\Windows\system32\98oz2ll.exe
O4 - HKCU\..\Run: [uzpv60] C:\Windows\system32\i1yze86q81.exe
O4 - HKCU\..\Run: [lbcs1i] C:\Windows\system32\zpv66m86y81.exe
O4 - HKCU\..\Run: [gbcxy81] C:\Windows\system32\m1cdi86u.exe
O4 - HKCU\..\Run: [kaaqg1s] C:\Windows\system32\cxojzavl.exe
O4 - HKCU\..\Run: [qgwci] C:\Windows\system32\a1hrnijo.exe
O4 - HKCU\..\Run: [eza87] C:\Windows\system32\7ff2lr6.exe
O4 - HKCU\..\Run: [xntezkv] C:\Windows\system32\n5eeuabg.exe
O4 - HKCU\..\Run: [nojkf03] C:\Windows\system32\i1yjkfbbr.exe
O4 - HKCU\..\Run: [xyotep] C:\Windows\system32\av03m1ytupl.exe
O4 - HKCU\..\Run: [Windows Print Spooler] C:\Users\Philip\AppData\Roaming\Temp\spoolsv.exe
O4 - HKCU\..\Run: [gcxsi] C:\Windows\system32\abg86s81ep.exe
O4 - HKCU\..\Run: [zavb2] C:\Windows\system32\3g0hdte.exe
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [ezf60] C:\Windows\system32\81lghm8.exe
O4 - HKCU\..\Run: [nojzavl] C:\Windows\system32\csi0jzf66w.exe
O4 - HKCU\..\Run: [ypfqlgh] C:\Windows\system32\s86e81qbc.exe
O4 - HKCU\..\Run: [kpalmhx] C:\Windows\system32\pll66c86.exe
O4 - HKCU\..\Run: [dojefk] C:\Windows\system32\m0ndj66a81.exe
O4 - HKCU\..\Run: [nojkf] C:\Windows\system32\snoj087081.exe
O4 - HKCU\..\Run: [kabgc1s] C:\Windows\system32\tjjzf66w86o.exe
O4 - HKCU\..\Run: [MSConfig] C:\Users\Philip\gcvvcj.exe \u
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [Google Update] "C:\Users\Philip\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O8 - Extra context menu item: &D&ownload &med BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload alle videoer med BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload alt med BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki ... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Blog det - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog det i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.4.1.27.dll/206 (file missing)
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O13 - Gopher Prefix:
O16 - DPF: {4E218431-2F07-40BD-A9D3-035324C1F13F} (DyynoX Class) - http://webserver.dyyno.com/tng/dyyno-client/DyynoCAB.CAB
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/DA-DK/a-UNO1/GAME_UNO1.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{19CBF966-01CE-4526-981F-DBF361D12789}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{19CBF966-01CE-4526-981F-DBF361D12789}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{19CBF966-01CE-4526-981F-DBF361D12789}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Tjenesten Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS - Godkendelse af adgangskoder (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Program Files\Softex\OmniPass\OmniServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SrvCDEject - Unknown owner - C:\Program Files\Packard Bell\SrvCDEject.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 24911 bytes


På forhånd, mange tak.
Avatar billede VFJ99 Nybegynder
08. juli 2010 - 16:03 #1
Start med at kør en komplet ANTIVIRUS-scan af din computer. Sørg for at download alle opdateringer tilgængelige via Windows Update.

START --> ALLE PROGRAMMER --> WINDOWS UPDATE --> SØG EFTER OPDATERINGER.

Slet messenger og installer det igen efter du har scannet og opdateret.

Evt. Giv den en tur med: ccleaner (Både rens og register) (http://www.piriform.com/ccleaner)
Avatar billede johnstigers Seniormester
08. juli 2010 - 16:22 #2
VFJ99 - hvorfor laver du et svar allerede nu?

TheNythen> Skift password til messenger. Noget med blandede store og små bogstaver og tal.
Dit passsword er opsnappet af en messenger spambot.
Hvis dette hjælper, så laver jeg svar når jeg ved om det hjælper.
Avatar billede VFJ99 Nybegynder
08. juli 2010 - 16:29 #3
Det gik lidt stærkt. Skal lige lære systemet at kende.
Avatar billede TheNythen Nybegynder
08. juli 2010 - 16:31 #4
Problemet, var han også gik på min venindes computer, af en eller anden grund. Og skrev fra hendes.
Kan det være at han er en eller anden person som har hacket Messenger eller sådan noget?
- Jeg er slet ikke inde i det her.
Men tusin tak til begge to. Jeg gør begge ting, for at være sikker!
Avatar billede sullep Nybegynder
08. juli 2010 - 16:51 #5
Den pc har så mange infektioner at jeg foreslår en geninstallation uden fildelingsprogrammer.
Avatar billede johnstigers Seniormester
08. juli 2010 - 17:26 #6
Lad os give den en chance.
Der er sikkert infektioner, men problemet med messenger tror jeg snarere har at gøre med et hacket password.

Men følg denne vejledning:
Hent Ccleaner her > Klik ude til højre på "Download Latest Version".
http://www.filehippo.com/download_ccleaner/
Der er en manual her > http://www.spywarefri.dk/manualer/ccleaner-manual.htm
Der er en lille forskel "Problemer" er udskiftet med "Register".
Sæt de flueben som vist i manualen punkt 11 inden du kører "Renser".
PS.: Dette program vil  jeg anbefale dig at beholde, det er fremragende til at rydde op med.

Under installationen får du tilbudt [Yahoo Toolbar]. Sig "Nej"  til den.
Lad programmer foretage en oprydning i Renser og Register, og lad den slette det den finder.
Jeg skal ikke se log fra Ccleaner.



Hent Malwarebytes Anti-Malware herfra:
http://www.malwarebytes.org/mbam-download.php
Installer programmet - når det er gjort skal du lade programmet opdatere sig. Herefter åbner et vindue, hvor du skal flytte prikken til "Kør et fuldstændigt systemscan" - klik på Skan Knappen - lad programmet arbejde. Når det er færdig (det tager lidt tid afhængig af hvor meget du har på computeren).
Derefter - Tryk på "Vis resultater" knappen efter scanningen - og herefter tryk på "Fjern det valgte" - nu åbnes log'en og du skal gemme den et sted, hvor du kan finde den igen.
Kopier indholdet herind sammen med en frisk log fra HiJackThis...

Manual for HiJackThis ->
http://www.spywareinfo.dk/index.htm#/manualer/hijackthis.htm

Bemærk at HiJackThis.exe programmet skal gemmes i en dertil oprettet mappe og IKKE køres direkte fra nettet...

Hent Hijackthis her: http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

PS: Vistabrugere skal klikke med højre-musetast på filen og vælge (Kør som administrator)
08. juli 2010 - 18:22 #7
YFFER PYFFER - den er MEGET GAL !!!

1) Total IKKE opdateret Vista!
2) Ikke opdateret Symantec/Norton
og en masse andre potentielle 'snavs' programmer...

Brug af
* BitComet
* BitTorrent
http://www.spywarefri.dk/artikel/farerne-ved-fildeling/

Jeg vil sige at det er en OMMER !!!
Avatar billede TheNythen Nybegynder
05. september 2010 - 11:54 #8
Tak for alle jeres svar, jeg er glad for i gad at komme med nogle gode hints. Har så heldigvis fået ny computer. Og den passer jeg jo bedre på.
- Desuden, var min computer en ommer lige fra starten af, hvor jeg fik den. Den var dårlig til at starte op, fordi min mus ikke passede til den, og så kunne den gå i stå midt i opstart.
Min såkaldte 'ven' var inde på porno på den, han slukkede den også ved at holde knappen inde på den, og lavede en masse lort. Heldigvis kom jeg da af med ham, da jeg opdagede det, første gang.
Nu er jeg så færdig med at det her, og opdatere min computer hver gang der er opdateringer, og jeg gider ikke download med mindre det er noget jeg er 110% sikker på, er helt i orden. :-)
Avatar billede IT-R Nybegynder
18. februar 2016 - 15:31 #9
En reinstall vil jeg anbefale. Lav backup, hvis muligt og start forfra.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester